---
title: Scoped Contractor Access
excerpt: ''
deprecated: false
hidden: true
metadata:
  title: ''
  description: ''
  robots: index
next:
  description: ''
---
## Overview

For the Moveworks implementation, your Moveworks Customer Success Team will require two contractor accounts that exist within the systems your organization will be integrating within Moveworks. These accounts will be used to test integrations and conversation flows end-to-end within the bot as part of the implementation and to troubleshoot any issues that occur for ongoing support and maintenance of the platform. **These accounts are not meant to provide day-to-day access to systems for the purposes of collaboration, meeting scheduling, or project management.** Continue to work with your Moveworks Customer Success team to align on a collaboration strategy that ensures alignment between teams.

When creating these accounts, please ensure that the accounts go through your organization's standard onboarding process, where the accounts get synced from the identity system, down to the other systems. This will ensure that the accounts that the Moveworks Customer Success team is using are representative of any other employee within your organization that would be using the Moveworks bot.

> 📘
>
> The accounts should be "named accounts" and associated with members of your Customer Success Team. **e.g:** `john.smith@company.com` instead of `moveworkstest1@company.com`
>
> Additionally, each account should have a corporate email address that is consistent across all systems (ITSM, Identity, Chat, etc.).

If possible, the account created for your Implementation Engineer should be listed as the Manager for your Implementation Manager, to facilitate testing of skills that require Manager approval.

## Mandatory Access

The following user access should be provisioned for the Moveworks Customer Success Team:

<Table>
  <thead>
    <tr>
      <th>
        System
      </th>

      <th>
        Access Details
      </th>

      <th>
        Business Justification
      </th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>
        Virtual Desktop or Laptop
        (if required to access the below systems)
      </td>

      <td>
        Provide Virtual Desktop access (preferred), or alternatively provide a company laptop for the Moveworks team.
      </td>

      <td>
        This access is used to access  systems that may be behind your company's firewall. e.g: On-prem ITSM Platform
      </td>
    </tr>

    <tr>
      <td>
        Chat Platform
      </td>

      <td>
        Standard access to your chat platform to be able to talk to the bot.
      </td>

      <td>
        This is used for the Moveworks Customer Success team to be able to chat with the Moveworks bot in your organization's chat platform.
      </td>
    </tr>

    <tr>
      <td>
        ITSM Platform
      </td>

      <td>
        Access to view IT tickets, Form definitions, similar to what an IT agent would have access to.
      </td>

      <td>
        This is used to validate that the bot is creating tickets in your systems properly, and troubleshoot any potential issues that arise for ongoing support and maintenance of the Moveworks platform.
      </td>
    </tr>

    <tr>
      <td>
        Knowledge Platform
      </td>

      <td>
        Ability to view the Knowledge Base/Site that contains articles that should be ingested by the bot.
      </td>

      <td>
        This access is used to test the Moveworks Answers Skill.
      </td>
    </tr>

    <tr>
      <td>
        Identity and Access Management Platform
      </td>

      <td>
        Ability to be able to be added in groups within the identity management system to kick off software provisioning flows.  

        To support the testing of approval workflows, please set the IM account as the manager of the CSE account where possible.
      </td>

      <td>
        This access is used to test the Moveworks Account Access & Software Access Skill.
      </td>
    </tr>

    <tr>
      <td>
        Email Group Management System
      </td>

      <td>
        Email account exists within the Group Management system so that the user can be set to the owner of a group, and be added to groups.
      </td>

      <td>
        This access is used to test the Moveworks Group Access Skill.
      </td>
    </tr>
  </tbody>
</Table>

## Optional Access:

For deployments with an on-premise component, you can optionally grant: 

| Access Details                                      | Access Details                                                                                                                                                             | Business Justification                                                                                                                                                                                                                                  |
| --------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Active Directory                                    | SSH access to the linux machines running the Moveworks AD Agent machines and ability to run the commands listed in the supplemental Active Directory access needs document | If granted, this access is used for the Moveworks team to set up and configure the Moveworks Agent. If you have an in-house resource with Linux experience, that is able to complete the configuration independently, then this access is not required. |
| Identity & Access Management Read Only Admin Access | If supported by the system, please grant your CSE Read-Only Admin access to view the provisioning configurations in the system.                                            | This will allow the Moveworks CSE to more efficiently configure the bot and ensure it is integrated with the Identity & Access Management platform properly.                                                                                            |